Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kY5mP-3eutNhptqMbVndWSx_MRs.roa
File: kY5mP-3eutNhptqMbVndWSx_MRs.roa (raw, json)
Hash identifier: 6BgfQ5jevvRJWl+zR7zOO7j0v/L5TPP8i3WDc6w/B+M=
Subject key identifier: 91:8E:66:3F:ED:DE:BA:D3:61:A6:DA:8C:6D:59:DD:59:2C:7F:31:1B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A08D0BFE92E650460843BEC5DEEDD301A0
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kY5mP-3eutNhptqMbVndWSx_MRs.roa
Signing time: Thu 10 Sep 2026 20:39:28 +0000
ROA not before: Thu 10 Sep 2026 20:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 2.26.20.0/22 maxlen: 24
2.26.60.0/22 maxlen: 24
2.26.68.0/22 maxlen: 24
2.26.78.0/23 maxlen: 24
2.26.104.0/21 maxlen: 24
2.27.32.0/21 maxlen: 24
2.27.52.0/23 maxlen: 24
2.27.54.0/23 maxlen: 24
2.27.68.0/22 maxlen: 24
13.143.64.0/22 maxlen: 24
13.143.128.0/23 maxlen: 24
31.76.12.0/22 maxlen: 24
31.76.48.0/22 maxlen: 24
31.76.230.0/23 maxlen: 24
31.77.196.0/22 maxlen: 24
31.77.202.0/23 maxlen: 24
31.77.204.0/23 maxlen: 24
31.77.206.0/23 maxlen: 24
64.188.118.0/23 maxlen: 24
77.239.108.0/22 maxlen: 24
144.31.52.0/24 maxlen: 24
144.31.126.0/24 maxlen: 24
144.31.127.0/24 maxlen: 24
144.31.140.0/22 maxlen: 24
144.31.152.0/23 maxlen: 24
144.31.186.0/23 maxlen: 24
150.241.88.0/23 maxlen: 24
150.241.96.0/22 maxlen: 24
150.241.106.0/23 maxlen: 24
150.241.115.0/24 maxlen: 24
150.241.116.0/24 maxlen: 24
150.241.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:0b:fe:92:e6:50:46:08:43:be:c5:de:ed:d3:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 10 20:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=918e663feddebad361a6da8c6d59dd592c7f311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:0c:ed:c8:8c:28:43:4a:42:d0:1b:d6:a1:
6f:49:4b:60:95:b0:26:d1:57:86:e8:2c:69:8f:7e:
7d:ee:7f:62:49:13:02:28:51:4d:ea:c1:be:32:66:
73:b0:95:8b:84:31:e8:35:40:b4:d8:39:17:c1:b6:
3a:68:3b:dd:38:d8:fe:bb:ca:ad:8d:65:08:1b:79:
26:32:81:b4:72:32:4e:5e:8f:0b:a9:bd:fa:52:aa:
2a:f4:c6:36:25:88:5f:b5:07:16:00:ab:09:e4:35:
95:b0:4c:24:6d:75:c6:d6:df:77:a4:01:90:68:d6:
7d:5b:bf:2b:9f:f0:e4:5e:d7:18:7e:f6:9f:ac:9d:
48:bc:19:c8:a7:66:f4:45:ec:99:a7:f5:1d:5e:a8:
7d:b1:de:46:a1:dc:d9:4e:35:02:8f:44:87:c2:63:
7f:9b:32:de:63:b8:fd:60:be:e9:bd:9b:f0:2f:de:
50:c9:95:b6:81:2e:3b:a7:28:a0:67:08:db:8c:a8:
8d:ac:85:48:79:d6:91:98:61:27:51:8a:35:74:c0:
00:90:dd:b3:58:d4:06:3e:7e:2f:d9:6e:db:f1:05:
7f:1c:78:36:6c:ee:fa:f1:8b:ea:6d:7e:2d:19:2f:
c5:d4:d0:21:8c:4b:2b:fe:fb:ab:87:f8:ee:df:ac:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:66:3F:ED:DE:BA:D3:61:A6:DA:8C:6D:59:DD:59:2C:7F:31:1B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kY5mP-3eutNhptqMbVndWSx_MRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.20.0/22
2.26.60.0/22
2.26.68.0/22
2.26.78.0/23
2.26.104.0/21
2.27.32.0/21
2.27.52.0/22
2.27.68.0/22
13.143.64.0/22
13.143.128.0/23
31.76.12.0/22
31.76.48.0/22
31.76.230.0/23
31.77.196.0/22
31.77.202.0-31.77.207.255
64.188.118.0/23
77.239.108.0/22
144.31.52.0/24
144.31.126.0/23
144.31.140.0/22
144.31.152.0/23
144.31.186.0/23
150.241.88.0/23
150.241.96.0/22
150.241.106.0/23
150.241.115.0-150.241.116.255
150.241.123.0/24
Signature Algorithm: sha256WithRSAEncryption
89:bf:89:e7:59:75:2d:02:c8:c0:0f:24:f3:a6:59:69:e3:33:
3d:bf:cf:41:f9:91:59:00:66:ca:b6:5f:6d:d4:f4:82:52:b9:
52:f0:db:d9:cc:1c:f1:f3:97:11:80:6b:ab:ba:c0:50:94:82:
5c:95:74:42:e7:7a:e2:71:1e:91:55:b2:48:16:16:c2:19:bf:
91:e7:8d:fd:1d:e4:b1:6e:1e:af:73:61:fd:f4:e7:fa:6d:88:
e0:b8:6b:36:08:fc:73:7d:be:d4:95:79:9f:ec:ac:d2:f4:15:
63:58:c3:0d:26:f2:67:38:37:2e:5c:8b:00:6d:0b:77:91:04:
a9:07:9d:7c:81:4b:5d:44:aa:a1:3f:ba:a5:8c:8b:6a:ed:06:
8a:83:74:2f:88:2f:0e:d7:7a:ab:8f:6a:ac:98:4e:a6:37:a9:
0f:02:92:c2:24:92:62:6d:28:fa:76:f3:bf:fd:a5:0f:87:b5:
9c:96:f8:ca:cd:4a:0a:2f:41:33:62:d4:d2:b3:97:06:45:75:
ac:9e:21:d2:2c:85:41:00:ee:2c:0a:8e:a4:71:67:23:5b:7f:
c8:0e:f9:09:f9:fb:0e:4e:08:32:c5:72:3e:f2:ec:a1:5f:aa:
2c:14:72:ed:a2:53:2f:e3:2e:fb:fc:31:47:ae:a2:d0:5c:7e:
94:9e:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:25:42 2026 by rpki-client